Legal Register
Interactive Tool
The Living Compliance Calendar

DPDP Compliance Calendar & Operational Rhythms

Compliance is an ongoing operating rhythm across 4 distinct layers: statutory milestones, annual cycles, monthly monitoring loops, and sectoral overlays.

Tranche 2 · 13 Nov 20261 Year Window

Consent Manager Registration

Mandatory registration of statutory Consent Managers under Section 6(9) and Rule 4.

57
Days
0
Hours
11
Mins
47
Secs
Tranche 3 · 13 May 2027Core Operating Cliff

General Fiduciary Obligations & Penalties

All core duties live: notice (s.5), consent (s.6), safeguards (s.8(5)), breach (s.8(6)), erasure (s.8(7)), rights & ₹250 cr penalties.

238
Days
0
Hours
11
Mins
47
Secs

Layer 1: One-Time Commencement Milestones

Statutory Tranches
13 Nov 2025 (Tranche 1)
Board & Definitions
Data Protection Board established; statutory definitions enacted.
13 Nov 2026 (Tranche 2)
Consent Managers
Mandatory registration of Consent Managers under s.6(9)/r.4.
13 May 2027 (Tranche 3)
The Core Operating Cliff
All fiduciary duties, rights, breach intimation, and penalties live.

Layer 2: Recurring Statutory Cycles

Annual & Periodic
Annual Independent Audit
Mandatory annual independent data audit for Significant Data Fiduciaries (s.10(2)(b)).
Periodic DPIA Refresh
Mandatory DPIA review for designated SDFs and before launching high-risk processing (r.13).
Processor Assurance Audit
Annual third-party vendor review, SOC2/ISO audit, and subprocessor list update (s.8(2)).

Layer 3: Operational Monitoring Loops

Monthly & Weekly
Monthly Regulatory Watch (Checklist C-08)
Monitor Gazette of India, MeitY portal, DPB orders, and unexercised statutory powers (s.10 SDF designations, s.16 transfer restrictions).
Weekly Rights SLA Backlog Sweep
Reconcile open Data Principal rights requests (access, correction, erasure) and 3-tier grievance tickets against statutory SLA timers.